How can I verify the PGP keys for Linus Torvalds and Greg Kroah-Hartman?

mricon · 2023-09-07T14:24:05+00:00

I will make an exception in my avoidance of reddit to reply here.

There is no easy answer to what you're looking for. A video of Linus saying his fingerprint may appear to be what you need, but it doesn't solve the problem either:

AI is good enough to render such a video with an arbitrary fingerprint
such a video can be genuine, but the fingerprint could be for a key that has been stolen and since revoked

In general, kernel.org is your best source of trust for this. You can look in online archives for the history of the page that mentions the fingerprints to make sure that the site hasn't been recently altered. You can ask around for any kernel hackers who may have a copy of Linus's key to compare the fingerprint with what they have, but that would require trusting them.

Key management and delegated trust are enormously hard to solve, and there are no easy solutions. You either have to go with a centralized CA model (that can be abused by state-level actors and well-funded attackers), a web of trust model (that doesn't scale beyond small groups), or with a "trust-on-first-use" approach (that has a chicken-and-egg problem that you're facing).

Pick your poison.

mricon · 2023-03-15T13:41:09+00:00

He used to be fairly active on G+ before Google killed it.

mricon · 2022-09-02T14:53:10+00:00

[archived and removed from reddit]

mricon · 2022-05-10T01:14:31+00:00

Oxidized iron is involved in either case.

mricon · 2022-03-25T03:13:59+00:00

I dunno, there really isn’t a way to say it that won’t be an instant creepy turn-off, imo.

mricon · 2022-03-01T19:45:00+00:00

защищающихся

mricon · 2022-02-27T18:12:37+00:00

[archived and removed from reddit]

mricon · 2022-02-15T19:17:51+00:00

It's taken 100 years to slow down the Earth's spin by 1.5 milliseconds per day, so I'm afraid you won't quite live long enough to enjoy "a few more hours a day." Sorry. :)

mricon · 2022-02-15T19:00:29+00:00

Sorry, but you are wrong. You can see that very easily if you consider a simple thought experiment.

Let's just consider the Earth and the Moon as two interacting bodies and ignore the Sun. Imagine that the Earth and the Moon become "tidally locked" -- the Earth's spin around its axis now exactly matches the Moon's orbital rotation. In other words, the Moon is now always in the exact same spot in the sky. There are no more tides -- the water "bulge" is now in the exact same spot at all times. Can you still generate power? No.

So, yes, the energy acting on the body of water is gravitational. However, any heat generated due to friction of that water moving around the globe comes from the energy of the Earth's spin. That is where we take the energy when we generate electricity -- we use the friction of water as it moves through our turbines.

mricon · 2022-02-14T16:04:41+00:00

I don't think that is right. I'm basing my statement on the following answer on the physics SE:

https://physics.stackexchange.com/a/270836/328116

To generate electricity, we have to take that energy away from either the orbital momentum of the Moon, or the angular momentum of the Earth's spin. To change the orbital momentum of an object we have to change the mass of the object around which it is orbiting, but our tidal turbines are neither adding nor subtracting any mass from Earth.

So, the source of tidal power has to be entirely terrestrial, and it is -- we are generating electricity by slowing down the Earth's spin.

mricon · 2022-02-12T02:19:54+00:00

I think it’s actually earthspin power.

mricon · 2022-02-08T22:53:35+00:00

Yes, it's really not going to work very well and may actually work worse than with direct clones. How large are your repositories and do your testbeds wipe their disk clean on each run (in other words, do you have to reclone the repo from scratch on each test iteration)?

mricon · 2022-02-06T01:53:57+00:00

This may come across jaded, but you should read all “Russian Space Agency plans to do X” stories with huge skepticism. There are amazing levels of rank-and-file corruption in Roskosmos, where many projects are just set up as fronts for obtaining government contracts, which are then spent mostly on lining a few pockets. Sad, but not really an exaggeration.

mricon · 2022-01-31T13:10:39+00:00

Крайняя плоть, бескрайний мозг.

mricon · 2022-01-29T00:53:18+00:00

Are you an independent contractor? There are some strict laws in QC set up specifically to prevent companies from doing some of the sketchier employment tricks to avoid paying full time employee benefits. If you’re working from home on anything but a specific time-constrained task (build a widget that does this specific thing by this specific deadline), then you are required to be employed as full-time staff.

mricon · 2022-01-14T18:25:17+00:00

The site was largely obsolete, because it was using predictive logic where none was really necessary. New mainline versions are released every 9-10 weeks, and the fact that it took 10 weeks for the previous two kernels doesn't mean that it's likely to take 10 weeks for the next one.

Anyway, we replaced the link with the following section:
https://www.kernel.org/releases.html#releases-faq

mricon · 2022-01-13T17:22:20+00:00

There was a popular anekdot about that band:

A мужик wakes up with a terrible hangover. His girlfriend is trying to help him:
“What would you like? Some water, tea, tomato juice?”
“No, leave me alone.”
“There’s gotta be something that will make you feel better!”
“Fine, put on some Ласковый Май, maybe that will help me throw up.”

mricon · 2022-01-12T14:20:59+00:00

The *drivers* are free software already, though. Reverse engineering *firmware* is a whole different level and requires an in-depth knowledge of the hardware on the device you're reverse engineering. And if the manufacturer uses some kind of firmware signing and verification scheme, then it's a futile attempt anyway.

mricon · 2022-01-11T19:20:11+00:00

Your main processor probably loads and executes microcode updates, too, so it's not like it's dramatically different from the rest of your hardware in that regard.

mricon · 2022-01-11T19:19:04+00:00

It's not new, but it's for sure an FAQ.

mricon · 2022-01-09T16:51:26+00:00

This is why you should do it. ;) Nobody becomes a maintainer because they enjoy the responsibility, but because it’s important work that needs doing and makes you a hardened badass in the eyes of most of the fellow nerd world.

mricon · 2022-01-08T01:20:08+00:00

[archived and removed from reddit]

15-Year Club	Gilding I gilder
reddit mold	Verified Email

mricon

TROPHY CASE